CVE-2023-2251
1 advisory.
npm/yaml CVE-2023-2251: high 7.5, EPSS 1.09%
Uncaught Exception in yaml
Action: Upgrade yaml to 2.2.2 or later.
npm i yaml@2.2.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0-5 | 2.2.2 | - |
Fixed versions
| 2.2.2 |
Sources
- osv: GHSA-f9xv-q969-pqx4
- https://nvd.nist.gov/vuln/detail/CVE-2023-2251
- https://github.com/eemeli/yaml/commit/984f5781ffd807e58cad3b5c8da1f940dab75fba
- https://github.com/eemeli/yaml
- https://huntr.dev/bounties/4b494e99-5a3e-40d9-8678-277f3060e96c
CVE-2023-2251 · published · modified · JSON